stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
cf5b72974f923126944f4dcd47e85864ebb31a3b
git.stella-ops.org/docs/features/unchecked/cli/policy-simulation-batch-mode-with-sbom-selectors.md

1.1 KiB
Raw Blame History

Policy Simulation Batch Mode with SBOM Selectors

Module

Cli

Status

IMPLEMENTED

Description

Batch mode policy simulation with SBOM selector patterns (e.g., registry:docker.io/*, tag:production), severity heatmap summaries, and manifest download for offline analysis.

Implementation Details

  • Command Group: src/Cli/StellaOps.Cli/Commands/PolicyCommandGroup.cs -- policy simulation commands
  • Commands:
    • stella policy simulate <file> --batch --selector <pattern> -- batch simulation. Options: --severity-heatmap, --download-manifests, --output <path>, --format table|json
  • Selector patterns: registry:docker.io/*, tag:production, label:team=security

E2E Test Plan

  • Run stella policy simulate ./policy.stella --batch --selector "registry:docker.io/*" and verify batch results
  • Run with --severity-heatmap and verify severity distribution summary
  • Run with --download-manifests and verify manifests downloaded for offline analysis
  • Verify selector pattern matching (registry, tag, label patterns)
  • Verify --format json output with per-artifact results